scp中，不同账户的key追加到主机的authorized_keys，为什么还需要密码？

wangzhixing_tt

为了使用scp不用密码，并且不同账户可以公用一个authorized_keys

账号A生成了id_rsa.pub_A
账号B生成了id_rsa.pub_B
把这两个都拷贝到主机上

到主机上执行：
cat id_rsa.pub_A >> authorized_keys
cat id_rsa.pub_B >> authorized_keys

可以为什么账户A或账户B用scp传文件到主机还是要密码呀？
但如果把authorized_keys换成单独的某个账户，就不需要密码，说明生成的KEY是没问题
就是公用的时候不行。。。。

flw

账号得一样吧。
不能是不同账号。

wangzhixing_tt

回复 2# flw

你的意思是说这种方法只能是不同机器，不能是不同的账号？

flw

是的。

chengchow

scp默认私钥读取的是id_isa文件，如果你生成时采用手动指定私钥和公钥，登录时需要用scp -i identified_files 登录
例如：秘钥对
私钥：aaa@abc.com
公钥：aaa@abc.com.pub

目标机器上user123用户下：cat aaa@abc.com.pub >> /home/user123/.ssh/authorized_keys

登录：scp -i aaa@abc.com  /tmp/aa.log user123@ip:/tmp


另外秘钥权限需要设置成600

jason680

回复 1# wangzhixing_tt

账号A 生成了/home/A/.ssh/id_rsa.pub => HOST:/home/A/.ssh/authorized_keys

账号B生成了/home/B/.ssh/id_rsa.pub  => HOST:/home/B/.ssh/authorized_keys

bikkuri

回复 1# wangzhixing_tt

直接用ssh-copy-id命令复制本地密钥到远程机器上去就行了。

NAME
     ssh-copy-id — use locally available keys to authorise logins on a remote machine
SYNOPSIS
     ssh-copy-id [-n] [-i [identity_file]] [-p port] [-o ssh_option] [user@]hostname
     ssh-copy-id -h | -?
DESCRIPTION
     ssh-copy-id is a script that uses ssh(1) to log into a remote machine (presumably using a login password, so password authentication should be
     enabled, unless you've done some clever use of multiple identities).  It assembles a list of one or more fingerprints (as described below) and
     tries to log in with each key, to see if any of them are already installed (of course, if you are not using ssh-agent(1) this may result in you
     being repeatedly prompted for pass-phrases).  It then assembles a list of those that failed to log in, and using ssh, enables logins with those
     keys on the remote server.  By default it adds the keys by appending them to the remote user's ~/.ssh/authorized_keys (creating the file, and
     directory, if necessary).  It is also capable of detecting if the remote system is a NetScreen, and using its ‘set ssh pka-dsa key ...’ command
     instead.

zy86416779

我有三台机器，centos5，centos6，centos7，我让centos5和centos7的root用户免密码访问centos6的henry用户。

1. [root@CentOS_5 .ssh]# scp id_rsa.pub 192.168.0.100:/home/henry
   
2. id_rsa.pub                                                                                                             100%  398     0.4KB/s   00:00   
   
3. [root@CentOS_5 .ssh]# pwd
   
4. /root/.ssh
   
5. [root@CentOS_6 henry]# mkdir .ssh; chmod 700 .ssh
   
6. [root@CentOS_6 henry]# ll -d
   
7. drwx------ 5 henry henry 4096 1月  26 10:52 .
   
8. [root@CentOS_6 henry]# ll -d /home/henry/.ssh/
   
9. drwx------ 2 root root 4096 1月  26 10:52 /home/henry/.ssh/
   
10. [root@CentOS_6 henry]# cat id_rsa.pub >> .ssh/authorized_keys
    
11. [root@CentOS_6 henry]# cd .ssh/
    
12. [root@CentOS_6 .ssh]# ll
    
13. 总用量 4
    
14. -rw-r--r-- 1 root root 398 1月  26 10:53 authorized_keys
    
15. [root@CentOS_6 .ssh]# id
    
16. uid=0(root) gid=0(root) 组=0(root),1(bin),2(daemon),3(sys),4(adm),6(disk),10(wheel)
    
17. [root@CentOS_6 .ssh]# id henry
    
18. uid=1001(henry) gid=1001(henry) 组=1001(henry)
    
19. [root@CentOS_6 .ssh]# chown henry:henry authorized_keys
    
20. [root@CentOS_6 .ssh]#
    
21. [root@CentOS_6 .ssh]#
    
22. [root@CentOS_6 .ssh]# ll -da
    
23. drwx------ 2 root root 4096 1月  26 10:53 .
    
24. [root@CentOS_6 .ssh]# cd ..
    
25. [root@CentOS_6 henry]# ll -da
    
26. drwx------ 5 henry henry 4096 1月  26 10:52 .
    
27. [root@CentOS_6 henry]# ll -d
    
28. drwx------ 5 henry henry 4096 1月  26 10:52 .
    
29. [root@CentOS_6 henry]# ll -d .ssh/
    
30. drwx------ 2 root root 4096 1月  26 10:53 .ssh/
    
31. [root@CentOS_6 henry]# chown henry:henry .ssh/
    
32. [root@CentOS_5 ~]# ssh henry@192.168.0.100
    
33. Last login: Thu Jan  5 22:42:46 2017 from centos_5.11

复制代码

1. [root@centos_7 .ssh]# scp id_rsa.pub 192.168.0.100:/home/henry
   
2. id_rsa.pub
   
3. [root@CentOS_6 henry]# su - henry
   
4. [henry@CentOS_6 ~]$ pwd
   
5. /home/henry
   
6. [henry@CentOS_6 ~]$ ls
   
7. id_rsa.pub
   
8. [henry@CentOS_6 ~]$ cat id_rsa.pub >> .ssh/authorized_keys
   
9. [root@centos_7 .ssh]# ssh henry@192.168.0.100
   
10. Last login: Thu Jan 26 10:56:24 2017 from centos_5.11

复制代码